Описание
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:lynxtechnology:twonky_server:8.5.2:*:*:*:*:*:*:*
Одно из
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.46062
Средний
8.1 High
CVSS3
Дефекты
CWE-321
Связанные уязвимости
CVSS3: 8.1
github
30 дней назад
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.
EPSS
Процентиль: 98%
0.46062
Средний
8.1 High
CVSS3
Дефекты
CWE-321